IS4670

IS4670

Police Cyber Crimes Division
Computer Evidence Chain of Custody

Item Number(s): 10001-FMT-CCD
Case: State vs Peterson

To be completed by initial collector:
Sean Hulbert
Evidence collected by (name): ________________________________________________________________
08-30-2010
Date/Time collected: ________________________________________________________________________
Evidence description:
Seized hard drive from credit card theft case
_________________________________________________________________________________________
_________________________________________________________________________________________
Describe Collection method (include operating system, utility, commands, arguments, etc):
FTK Imager field seizure and imaged , Windows XP , Physical Write blocker used on hard drive
_________________________________________________________________________________________
_________________________________________________________________________________________
What application software/utility is required to view the file?:
FTK Imager or Encase Imager and CSV Viewer
_________________________________________________________________________________________
_________________________________________________________________________________________
Storage location 99 (Police off site impound cold storage)
Where is evidence initially stored?: ____________________________________________________________
Laptop
How is evidence initially secured?: ____________________________________________________________
Collector signature: ________________________________________________ Date: ___________________

Copy History:

Date

Copied By

08-30-2010

Sean Hulbert

Copy Method
FTK Imager

Disposition of original and all copies
Stored and secured

Transfer History:
John Dow
Transferred from (print name, sign & date): ________________________________________________________________________
Carlos Castillo 3-24-15
Transferred...

Similar Essays